EUVD-2026-55229
GHSA-p6w2-c4j5-7xhm
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network access with no user interaction and low complexity; scope changed (S:C) because host compromise extends to command injection into connected spacecraft.
Primary rating from Vendor (TuranSec).
CVSS VectorVendor: TuranSec
Lifecycle Timeline
3DescriptionCVE.org
Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprime_gds/flask/app.py applies no authentication to any endpoint. A path traversal in src/fprime_gds/flask/updown.py allows reading and writing arbitrary files outside the upload directory. A hardcoded secret key (CWE-321) in the application enables session forgery. Chained together, these vulnerabilities allow complete compromise of the ground data system and any spacecraft under its control.
Articles & Coverage 1
AnalysisAI
Remote code execution in NASA fprime-gds through version 3.4.3 lets an unauthenticated remote attacker fully compromise the ground data system and inject arbitrary commands to any connected spacecraft. The Flask ground station exposes every endpoint without authentication (CWE-306), while a path traversal in the upload/download handler permits reading and writing arbitrary files, and a hardcoded Flask secret key (CWE-321) enables session forgery; chained, they yield code execution on the ground station host. No public exploit is identified at time of analysis, but the CVSS 9.8 rating and unauthenticated network vector make this a high-priority, real-world risk for anyone running F Prime ground software.
Technical ContextAI
F Prime (fprime) is NASA JPL's open-source flight software framework; fprime-gds is its companion Ground Data System, a Python package distributed via PyPI that operators use to command and receive telemetry from spacecraft and embedded flight targets. The exposed attack surface is the Flask web application in src/fprime_gds/flask/app.py, which the CVE states applies no authentication to any route - the CWE-306 (Missing Authentication for a Critical Function) root cause. Two supporting weaknesses compound it: src/fprime_gds/flask/updown.py performs file upload/download without properly constraining paths, a classic directory-traversal (CWE-22) allowing reads and writes outside the intended upload directory; and a hardcoded application secret key (CWE-321, Use of Hard-coded Cryptographic Key) means Flask session cookies can be forged offline. The commanding path (src/fprime_gds/flask/commands.py) is what turns host compromise into spacecraft command injection, because the GDS is the trusted uplink channel to the vehicle.
RemediationAI
No vendor-released patch version was identified in the provided data, so no fixed version can be cited without inventing one - monitor https://github.com/nasa/fprime-gds and https://pypi.org/project/fprime-gds/ for a release above 3.4.3 and upgrade as soon as one is published. Until then, apply compensating controls: do not expose the fprime-gds Flask interface to any untrusted network - bind it to localhost or an isolated operations VLAN and place it behind a reverse proxy that enforces authentication (e.g., mutual TLS or HTTP auth), since the app itself performs none; restrict network access to the GDS host with firewall rules allowing only known operator workstations (trade-off: breaks remote/browser access for legitimate distributed teams). Override the hardcoded Flask SECRET_KEY with a strong per-deployment random value via configuration/environment to defeat session forgery. If the file upload/download feature is not needed, disable the updown routes to remove the path-traversal surface (trade-off: loses in-GDS file transfer capability). Given spacecraft command injection is the ultimate impact, segment the uplink so the GDS host cannot command the vehicle without an additional out-of-band authorization step where mission design permits.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution affects Kestra OSS (the open-source event-driven orchestration platform) prior to
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today